Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,746 stories synthesized.
NetSPI has introduced a new suite of AI-powered Continuous Pentesting offerings aimed at helping organizations identify and validate security risks across dynamic cloud and external environments.
SecureLayer7 has launched Sandyaa, an open-source autonomous security tool that uses recursive LLM analysis to audit source code and generate functional proof-of-concept exploits for confirmed vulnerabilities.
The TanStack open-source project has confirmed a supply-chain compromise after attackers hijacked its GitHub Actions environment to inject malicious code into its npm packages.
A new survey reveals that while most organizations believe they are prepared for AI adoption, nearly half lack the governance necessary to manage the persistent, unmonitored access granted to non-human identities and AI agents.
Vietnam has launched a strategic initiative to develop a sovereign cloud platform by 2030, aiming to eliminate reliance on foreign cloud providers and strengthen national data security.
Google is rolling out a major security update across the Android ecosystem, introducing AI-driven threat detection, verified financial call authentication, and expanded anti-theft measures to combat rising mobile fraud and device theft.
The SANS Internet Storm Center has issued an alert regarding a new NGINX vulnerability and an active zero-day exploit targeting Cisco systems.
Security researchers are adopting traffic redirection techniques to bypass the visibility limitations imposed by TLS 1.3, enabling the inspection of encrypted API calls from Windows executables.
Trend Micro reveals how TeamPCP compromised Checkmarx KICS and elementary-data in April 2026, using poisoned CI/CD pipelines to steal credentials and sign malicious packages with legitimate keys.
GitLab released versions 18.11.3, 18.10.6, and 18.9.7 on May 13, 2026, patching multiple high-severity vulnerabilities including cross-site scripting and denial-of-service issues across Analytics dashboards, global search, and CI/CD APIs.
Microsoft's May 2026 security updates address 137 vulnerabilities, including 30 critical flaws, with high-priority fixes required for RCE vulnerabilities in Windows Netlogon, the Windows DNS Client, and Dynamics 365.
The Fedora Project has introduced Fedora Hummingbird, a container-based, rolling Linux distribution that applies distroless, OCI-image-based security models to the host operating system.
Foxconn has confirmed a cyberattack on its North American facilities after the Nitrogen ransomware gang claimed to have stolen 8 terabytes of sensitive data belonging to the manufacturer's high-profile clients.
Microsoft's new agentic security system, MDASH, has uncovered 16 vulnerabilities in the Windows networking and authentication stack, including four critical remote code execution flaws, marking a shift from AI research to production-grade vulnerability discovery.
Microsoft's May 2026 Patch Tuesday addresses 118 vulnerabilities, including 16 critical flaws, with no zero-days fixed for the first time in nearly two years.
Two vulnerabilities in the Avada Builder WordPress plugin, affecting up to 1,000,000 sites, allow authenticated arbitrary file read and unauthenticated SQL injection, with patches now available.
For the first time in nearly two years, Microsoft's May 2026 Patch Tuesday contained no actively exploited zero-days, but fixed 137 CVEs including two critical Office Word RCEs exploitable via the Preview Pane.
The UK Information Commissioner's Office has fined South Staffordshire Water Plc £963,900 ($1.3 million) for a Cl0p ransomware attack that exposed the personal data of 663,887 customers and employees, citing severe security failures including insufficient privilege escalation controls and use of obsolete Windows Server 2003.
Microsoft's May 2026 Patch Tuesday addresses 137 vulnerabilities, 31 rated critical, with no known active exploitation, including remote code execution flaws in Windows Netlogon, Native WiFi Miniport Driver, and Azure Managed Instance for Apache Cassandra.
Taiwanese electronics giant Foxconn confirmed a cyberattack affecting its North American factories, with the Nitrogen ransomware gang claiming responsibility and alleging theft of 8 terabytes of data.
Signal has introduced new in-app confirmations and warnings to protect users from phishing and social engineering attacks, particularly those abusing the Linked Device feature.
Microsoft's May 2026 Patch Tuesday addresses over 120 vulnerabilities with no zero-days, but includes critical Word RCE bugs exploitable via the Preview Pane and a Hyper-V guest-to-host escape.
West Pharmaceutical Services reported a ransomware attack that began on May 4, 2026, disrupting shipping, receiving, and manufacturing systems, with data theft and encryption of on-premise infrastructure.
Microsoft released the Windows 10 KB5087544 extended security update on May 2026 Patch Tuesday, fixing 120 vulnerabilities and addressing a Remote Desktop Connection warning rendering issue.